Malicious emails with macro-enabled Word documents are spreading a never-before-seen remote-access Trojan, researchers say.
Phishing emails purporting to contain COVID-19 safety information from the World Health Organization (WHO) are instead phishing lures intended to spread a novel remote-access Trojan (RAT) called Nerbian.
A team of Proofpoint researchers have published a report noting that so far, the Nerbian RAT, first spotted on Apr. 26, has spread primarily throughout Italy, Spain, and the UK. Notably, Nerbian is written in the Go language, taking advantage of several open source libraries, the analysts added.